Cisco PIX 525 Spécifications télécharger pdf (Page 416)

B-12

Cisco PIX Firewall and VPN Configuration Guide

78-15033-01

Appendix B Configuration Examples for Other Remote Access Clients

Windows 2000 Client with IPSec and L2TP

Overview

The example shows the use of IPSec with L2TP, which requires that IPSec be configured in transport

mode. For detailed command reference information, refer to the Cisco PIX

Firewall Command

Reference.

Note For information on configuring the PIX Firewall for RSA signatures or pre-shared keys as the

authentication method, refer to the isakmp command in page within the Cisco PIX

Firewall Command

Reference. For information on obtaining certificates for RSA signature authentication from a CA, refer

to “Using Certification Authorities” in Chapter 6, “Configuring IPSec and Certification Authorities.”

Configuring the PIX Firewall

In this example, PIX Firewall uses PAP and AAA authentication. No conduits/access lists are included,

because the sysopt connection permit-l2tp option, which permits L2TP traffic, is set in Step 23.

Follow these steps to configure the PIX Firewall to interoperate with the Windows 2000 client:

Step 1 Define AAA related parameters:

aaa-server radius protocol radius

aaa-server partnerauth protocol radius

aaa-server partnerauth (dmz) host 192.168.101.2 abcdef timeout 5

Note Steps 2-10 use RSA signatures as the authentication method for ISAKMP negotiation. If you

want to use pre-shared keys as the authentication method, skip Steps 2-10 and configure the

following:

isakmp my secretkey address 0.0.0.0 netmask 0.0.0.0 and isakmp policy 1

authentication pre-share.

Step 2 Define a host name:

hostname SanJose

Step 3 Define the domain name:

domain-name example.com

Step 4 Generate the PIX Firewall RSA key pair:

ca generate rsa key 512

This command is entered at the command line and does not get stored in the configuration.

Step 5 Declare a CA:

ca identity abcd 209.165.200.228 209.165.200.228

The second address is configured if LDAP is used by that CA server. This command is stored in the

configuration.

Step 6 Configure the parameters of communication between the PIX Firewall and the CA:

ca configure abcd ra 1 20 crloptional

1 2 ... 411 412 413 414 415 416 417 418 419 420 421 ... 465 466

Pas de commentaire

Cisco PIX 525 Spécifications Page 416